René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"Organization","name":"Bytesafe","legalName":"Bitfront AB","url":"https://bytesafe.dev","logo":{"@type":"ImageObject","url":"https://bytesafe.dev/logo_square.png"},"image":"https://bytesafe.dev/logo_image.png","address":{"@type":"PostalAddress","streetAddress":"Mellanvägen 5","postalCode":"136 70","addressLocality":"Vendelsö","addressCountry":"SE"},"contactPoint":[{"@type":"ContactPoint","contactType":"sales","url":"https://bytesafe.dev/contact","availableLanguage":["English","Swedish"]}],"taxID":"559155-7912","sameAs":["https://www.linkedin.com/company/bytesafe/","https://www.linkedin.com/company/bitfront","https://github.com/bitfront-se","https://x.com/bytesafedev","https://www.youtube.com/@bytesafe","https://sbom.observer","https://www.linkedin.com/products/bytesafe-sbom-observer/"]}

{"@context":"https://schema.org","@type":"WebSite","name":"Bytesafe","alternateName":"Bytesafe Dependency Firewall","url":"https://bytesafe.dev"}

{"@context":"https://schema.org","@type":"SoftwareApplication","applicationCategory":"SecurityApplication","brand":{"@type":"Organization","name":"Bitfront"},"description":"Dependency Firewall blocks vulnerable and malicious packages before they reach your developers, CI/CD pipelines, and AI agents. Proxies any registry.","name":"Dependency Firewall","operatingSystem":"Web","url":"https://bytesafe.dev/firewall"}

{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"Can different projects have different policies?","acceptedAnswer":{"@type":"Answer","text":"Yes. You can create separate firewalls per project. They are lightweight and easy to clone. You can also differentiate by the user or token used for the session. Firewall configurations are small JSON files that can be managed in Git."}},{"@type":"Question","name":"Can packages be delayed before they reach developers?","acceptedAnswer":{"@type":"Answer","text":"Yes. Dependency Firewall can hold newly published package versions for a configurable window (7 or 14 days) before they reach developers or pipelines. Attacks on packages like shai-hulud, axios and tanstack exploited the gap between publish and detection. Centralizing delay rules means the protection applies automatically across all teams and pipelines without each project configuring it separately."}},{"@type":"Question","name":"How does malware detection work?","acceptedAnswer":{"@type":"Answer","text":"Dependency Firewall blocks packages that match known malware signatures."}},{"@type":"Question","name":"What happens if a package passes through but malware is found later?","acceptedAnswer":{"@type":"Answer","text":"The firewall tracks all packages via observations: first-seen date, last-seen date, and which firewalls they passed through. When new malware data surfaces, you can see exactly which projects downloaded the affected package and when. This gives your AppSec team a clear investigation trail."}},{"@type":"Question","name":"Are there alerts when a package is blocked?","acceptedAnswer":{"@type":"Answer","text":"The package manager reports the version could not be found, which breaks the build. Developers and CI/CD check the firewall logs (via UI or CLI) to see exactly which rule triggered and why. Audit entries include package name, version, user, IP, and the blocking rule."}},{"@type":"Question","name":"Can firewall rules be automated?","acceptedAnswer":{"@type":"Answer","text":"Yes. All configuration is available via API. Configurations can be version-controlled in Git and deployed through your existing automation. All changes are tracked with full rollback support."}},{"@type":"Question","name":"Does Dependency Firewall work with enterprise repository platforms?","acceptedAnswer":{"@type":"Answer","text":"Yes. Dependency Firewall speaks the same protocols as your package managers, so it is fully transparent to enterprise repository platforms and package registries, including JFrog Artifactory, Sonatype Nexus, GitLab, GitHub Packages and Azure Artifacts. It evaluates each package against your defined policies before it is served."}},{"@type":"Question","name":"How is licensing structured?","acceptedAnswer":{"@type":"Answer","text":"Two plans: Cloud for SaaS and Enterprise for custom deployment, Managed Cloud or On-Premise. Both include unlimited users, package requests and bandwidth with no usage-based fees. See /pricing for plan details and add-ons."}}]}